Hacking on Medium
Network Enumeration — SMB tricks

https://cdn-images-1.medium.com/max/633/1*b_XV-RWqnl0xYrhnM4FU4A.png
Nmap is an amazing tool to enumerate all open ports on the machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beware, fraudsters hacking iOS devices via Tinder and Bumble

https://cdn-images-1.medium.com/max/1462/1*rJVbU04aeZxhmeJMUjYTnw.png
Fraudsters have not only stolen millions of money but have also gained access to victims’ iPhones via Tinder and Bumble.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OTP Verification Message

https://cdn-images-1.medium.com/max/600/0*eIYB2eRhAYXPUnhT.png
Well, don’t worry even if you didn’t read it, let me give you a brief summary of my previous article. I was able to create a new account…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Syscoin NEVM Smart Contract Bug Bounties

This series of bug bounties are offered on Syscoin 4.3 NEVM (Network Enhanced Virtual Machine) TESTNET.Continue reading on Medium »
Read more...

Syscoin NEVM Smart Contract Bug Bounties
https://syscoin.medium.com/syscoin-nevm-smart-contract-bug-bounties-a84e10e3ae76?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This series of bug bounties are offered on Syscoin 4.3 NEVM (Network Enhanced Virtual Machine) TESTNET.Continue reading on Medium » (https://syscoin.medium.com/syscoin-nevm-smart-contract-bug-bounties-a84e10e3ae76?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Karma_V2 - A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

https://blogger.googleusercontent.com/img/a/AVvXsEio7ypunUVA3Qj_txIskEA0VO-oemAdzyVmCGNkpKI7ASkFqMq0u4AHuiU1yAzYrLa19AvYSbZ9Agogw5ltul9svDwmtIgXCH-yxX_6L63EjZnuRIqgDLCaWw2y7NmNKnEkDuAi0NPHBAZIX8s39gB7TpBQO1P7MoKjotaSzcN5aakgFZq29204_STXpA=w640-h478 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework) 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many more about their target. Shodan Premium API key is required to use this automation. Output from the 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is displayed to the screen and saved to files/directories.
Regarding Premium Shodan API, Please see the Shodan site for more information.

Shodan website: Shodan WebsiteAPI : Developer API Features* Powerful and flexible results via Shodan Dorks
* SSL SHA1 checksum/fingerprint Search
* Only hit In-Scope IPs
* Verify each IP with SSL/TLS certificate issuer match RegEx
* Provide Out-Of-Scope IPs
* Find out all ports including well known/uncommon/dynamic
* Grab all targets vulnerabilities related to CVEs
* Banner grab for each IP, Product, OS, Services & Org etc.
* Grab favicon Icons
* Generate Favicon Hash using python3 mmh3 Module
* Favicon Technology Detection using nuclei custom template
* ASN Scan
* BGP Neighbour
* IPv4 & IPv6 Profixes for ASN
* Interesting Leaks like Indexing, NDMP, SMB, Login, SignUp, OAuth, SSO, Status 401/403/500, VPN, Citrix, Jfrog, Dashboards, OpenFire, Control Panels, Wordpress, Laravel, Jetty, S3 Buckets, Cloudfront, Jenkins, Kubernetes, Node Exports, Grafana, RabbitMQ, Containers, GitLab, MongoDB, Elastic, FTP anonymous, Memcached, DNS Recursion, Kibana, Prometheus, Default Passwords, Protected Objects, Moodle, Spring Boot, Django, Jira, Ruby, Secret Key and many more... Installation1. Clone the repo# git clone https://github.com/Dheerajmadhukar/karma_v2.git2. Install shodan & mmh3 python module# python3 -m pip install shodan mmh33. Install JSON Parser [JQ]# apt install jq -y4. Install httprobe @tomnomnom to probe the requests# GO111MODULE=on go get -v github.com/tomnomnom/httprobe5. Install Interlace @codingo to multithread [Follow the codingo interlace repo instructions]# git clone https://github.com/codingo/Interlace.git & install accordingly. 6. Install nuclei @projectdiscovery# GO111MODULE=on go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei7. Install lolcat# apt install lolcat -y8. Install anew# GO111MODULE=on go get -u github.com/tomnomnom/anewOk, how do I use it?# cat > .token
SHODAN_PREMIUM_API_HEREUsageYou can use this command to check help: $ bash karma_v2 -hhttps://blogger.googleusercontent.com/img/a/AVvXsEiwgDdg64rNTc6b2mD31f0wbToyStMl8q6GFRJm5FbxgNDaZo18AoScnmap4TFvfqK6RAkkXONSGqLaAyqsCizSYeKPAD0HmzXNiZkeZ8CqkJr_xkg0BEBZ5RXnqZGs-LiPekPrqL-cFXD8gla1AY_KlNW8B0VTSQ7HJcF3Xb-7Urmpa_6F_U1Zrwxjzw=w640-h330 MODEsMODEExamples-ipbash karma_v2 -d -asnbash karma_v2 -d -cvebash karma_v2 -d -faviconbash karma_v2 -d -leaksbash karma_v2 -d -deepbash karma_v2 -d -countbash karma_v2 -d Demo* karma_v2 [mode -ip] https://camo.githubusercontent.com/132ba1ad6d67c9b[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Karma_V2 - A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Smersh : A Pentest Oriented Collaborative Tool

Smersh is a pentest oriented collaborative tool used to track the progress of your company’s missions and generate rapport.

Preview Front
https://blogger.googleusercontent.com/img/a/AVvXsEgW4zTF-sqEbT55kPb5H2pZyi6Kq37hyj0FRxUqpbHrxL_wev9_rljx6TSr2VIndOOmIWnczaKpygIZXjQlN2XypXM31_jh-ucGsv64C6QDEJipBM-TnTaZwUCNA-iotuRAac6Wb7t7vyjUXuuTKqkcMqTJed9Ufe51TW-XILPAytLvRJwZKvwtxbGu=s1867
Documentation

All information is available at the following address: https://docs.smersh.app

How to contribute ?

Just fork repository then create branch, work and push your content + create PR

git checkout -b MyBranch
git add -p
git commit -m “xx”
git push origin MyBranch
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PKINITtools : Tools For Kerberos PKINIT And Relaying To AD CS

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
LDAP Monitor — Live-Überwachung für Veränderungen an LDAP Objekten

https://cdn-images-1.medium.com/max/1920/1*SQ_D8Ktlp138EktzGFkT9w.jpeg
Das ist mal wieder ein klassisches Beispiel für sogenannte “dual use software”. In unserem Pentest-Alltag nutzen wir immer häufiger die…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is the Zero-Trust-Model?

https://cdn-images-1.medium.com/max/750/0*y3k21RG_SQIMUiwc.png
The zero-trust model is a security approach in which a strict check is made on the user or device regardless of its location in relation…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video